The cybersecurity firm ESET reported that Sandworm deployed a new, undocumented wiper malware named DynoWiper in the attempted disruptive attack on December 29, 2025.
Cybernews reports that illicit apps spoofing the widely used cryptowallets Exodus, Trust Wallet, and Ledger Live in the Canonical Snap Store have facilitated the distribution of crypto-stealing malware against Linux users.
BleepingComputer reports that the newly emergent sophisticated Linux malware framework VoidLink, which sets sights on cloud environments, has been primarily developed using AI.